Changme - A Default Credential Scanner

Wednesday, April 20, 2016

Changeme is designed to be simple to add new credentials without having to write any code or modules.

changeme keeps credential data separate from code. All credentials are stored in yaml files so they can be both easily read by humans and processed by changeme. Credential files can be created by using the mkcred.py tool and answering a few questions.

Installation

Use pip to install the python modules:
pip install -r requirements.txt

Usage Examples

Scan a subnet for default creds:
./changeme.py -s 192.168.59.0/24

Scan a single host:
./changeme.py -s 192.168.59.100

Scan a subnet for Tomcat default creds and set the timeout to 5 seconds:
./changeme.py -s 192.168.59.0/24 -n "Apache Tomcat" --timeout 5




Subscribe via e-mail for updates!